<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<title>wwwApp: user/password.php Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/search.js"></script>
<script type="text/javascript">
  $(document).ready(function() { searchBox.OnSelectItem(0); });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
 <tbody>
 <tr style="height: 56px;">
  <td style="padding-left: 0.5em;">
   <div id="projectname">wwwApp
   </div>
   <div id="projectbrief">A web app for workshop organizing, recruitment and qualification</div>
  </td>
 </tr>
 </tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.1.1 -->
<script type="text/javascript">
var searchBox = new SearchBox("searchBox", "search",false,'Search');
</script>
  <div id="navrow1" class="tabs">
    <ul class="tablist">
      <li><a href="index.html"><span>Main&#160;Page</span></a></li>
      <li><a href="annotated.html"><span>Classes</span></a></li>
      <li class="current"><a href="files.html"><span>Files</span></a></li>
      <li>
        <div id="MSearchBox" class="MSearchBoxInactive">
        <span class="left">
          <img id="MSearchSelect" src="search/mag_sel.png"
               onmouseover="return searchBox.OnSearchSelectShow()"
               onmouseout="return searchBox.OnSearchSelectHide()"
               alt=""/>
          <input type="text" id="MSearchField" value="Search" accesskey="S"
               onfocus="searchBox.OnSearchFieldFocus(true)" 
               onblur="searchBox.OnSearchFieldFocus(false)" 
               onkeyup="searchBox.OnSearchFieldChange(event)"/>
          </span><span class="right">
            <a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
          </span>
        </div>
      </li>
    </ul>
  </div>
  <div id="navrow2" class="tabs2">
    <ul class="tablist">
      <li><a href="files.html"><span>File&#160;List</span></a></li>
      <li><a href="globals.html"><span>File&#160;Members</span></a></li>
    </ul>
  </div>
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
     onmouseover="return searchBox.OnSearchSelectShow()"
     onmouseout="return searchBox.OnSearchSelectHide()"
     onkeydown="return searchBox.OnSearchSelectKey(event)">
<a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark">&#160;</span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark">&#160;</span>Classes</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark">&#160;</span>Files</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(3)"><span class="SelectionMark">&#160;</span>Functions</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(4)"><span class="SelectionMark">&#160;</span>Variables</a></div>

<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0" 
        name="MSearchResults" id="MSearchResults">
</iframe>
</div>

<div id="nav-path" class="navpath">
  <ul>
<li class="navelem"><a class="el" href="dir_111cd2f11cffd6d6d28d89ee0389ee9e.html">user</a></li>  </ul>
</div>
</div><!-- top -->
<div class="header">
  <div class="headertitle">
<div class="title">password.php</div>  </div>
</div><!--header-->
<div class="contents">
<a href="password_8php.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno">    1</span>&#160;&lt;?php</div>
<div class="line"><a name="l00002"></a><span class="lineno">    2</span>&#160;<span class="comment">/*</span></div>
<div class="line"><a name="l00003"></a><span class="lineno">    3</span>&#160;<span class="comment"> * Password hashing with PBKDF2. Changes:</span></div>
<div class="line"><a name="l00004"></a><span class="lineno">    4</span>&#160;<span class="comment"> * - added another salt: PASSWORD_SALT from config.php (in case only the database is compromised)</span></div>
<div class="line"><a name="l00005"></a><span class="lineno">    5</span>&#160;<span class="comment"> * - added temporary handling of old passwords (those with prefix &#39;old:0::&#39;)</span></div>
<div class="line"><a name="l00006"></a><span class="lineno">    6</span>&#160;<span class="comment"> * - added function generateRandomPassword($length) to generate temporary random passwords</span></div>
<div class="line"><a name="l00007"></a><span class="lineno">    7</span>&#160;<span class="comment"> * - added function passwordNeedsRehash($hash)</span></div>
<div class="line"><a name="l00008"></a><span class="lineno">    8</span>&#160;<span class="comment"> * Author: havoc AT defuse.ca, Licence: public domain</span></div>
<div class="line"><a name="l00009"></a><span class="lineno">    9</span>&#160;<span class="comment"> * www: https://defuse.ca/php-pbkdf2.htm</span></div>
<div class="line"><a name="l00010"></a><span class="lineno">   10</span>&#160;<span class="comment"> */</span></div>
<div class="line"><a name="l00011"></a><span class="lineno">   11</span>&#160;</div>
<div class="line"><a name="l00012"></a><span class="lineno">   12</span>&#160;<span class="comment">// These constants may be changed without breaking existing hashes.</span></div>
<div class="line"><a name="l00013"></a><span class="lineno"><a class="code" href="password_8php.html#a288b3a49ca71e24e0f8c7fbf851999da">   13</a></span>&#160;define(<span class="stringliteral">&quot;PBKDF2_HASH_ALGORITHM&quot;</span>, <span class="stringliteral">&quot;sha512&quot;</span>);</div>
<div class="line"><a name="l00014"></a><span class="lineno"><a class="code" href="password_8php.html#a1c828dd8ae0d5bd2b03f11c4b5eb2532">   14</a></span>&#160;define(<span class="stringliteral">&quot;PBKDF2_ITERATIONS&quot;</span>, 1000);</div>
<div class="line"><a name="l00015"></a><span class="lineno"><a class="code" href="password_8php.html#a944e7ae7b0664bcd501cfd6f17cbcce0">   15</a></span>&#160;define(<span class="stringliteral">&quot;PBKDF2_SALT_BYTE_SIZE&quot;</span>, 48);</div>
<div class="line"><a name="l00016"></a><span class="lineno"><a class="code" href="password_8php.html#adc661170f688302b0d0d4da74055a19e">   16</a></span>&#160;define(<span class="stringliteral">&quot;PBKDF2_HASH_BYTE_SIZE&quot;</span>, 48);</div>
<div class="line"><a name="l00017"></a><span class="lineno">   17</span>&#160;</div>
<div class="line"><a name="l00018"></a><span class="lineno"><a class="code" href="password_8php.html#a788fe3ca854015dcdd07b9f192a4a3bf">   18</a></span>&#160;define(<span class="stringliteral">&quot;HASH_SECTIONS&quot;</span>, 4);</div>
<div class="line"><a name="l00019"></a><span class="lineno"><a class="code" href="password_8php.html#a136504e82564d4e4c730a0136eedaf2a">   19</a></span>&#160;define(<span class="stringliteral">&quot;HASH_ALGORITHM_INDEX&quot;</span>, 0);</div>
<div class="line"><a name="l00020"></a><span class="lineno"><a class="code" href="password_8php.html#aa35c2b34bef45502f6b9de73dcdde662">   20</a></span>&#160;define(<span class="stringliteral">&quot;HASH_ITERATION_INDEX&quot;</span>, 1);</div>
<div class="line"><a name="l00021"></a><span class="lineno"><a class="code" href="password_8php.html#a3a70c05a23d1156d5e1798114ba4f068">   21</a></span>&#160;define(<span class="stringliteral">&quot;HASH_SALT_INDEX&quot;</span>, 2);</div>
<div class="line"><a name="l00022"></a><span class="lineno"><a class="code" href="password_8php.html#a5cf33fff05e1dd64472645f3ff29e6ff">   22</a></span>&#160;define(<span class="stringliteral">&quot;HASH_PBKDF2_INDEX&quot;</span>, 3);</div>
<div class="line"><a name="l00023"></a><span class="lineno">   23</span>&#160;</div>
<div class="line"><a name="l00024"></a><span class="lineno"><a class="code" href="password_8php.html#a26fb1747283617276edce7e87b038e96">   24</a></span>&#160;<span class="keyword">function</span> <a class="code" href="password_8php.html#a26fb1747283617276edce7e87b038e96">createPasswordHash</a>($password)</div>
<div class="line"><a name="l00025"></a><span class="lineno">   25</span>&#160;{</div>
<div class="line"><a name="l00026"></a><span class="lineno">   26</span>&#160;        <span class="comment">// format: algorithm:iterations:salt:hash</span></div>
<div class="line"><a name="l00027"></a><span class="lineno">   27</span>&#160;        $salt = base64_encode(mcrypt_create_iv(<a class="code" href="password_8php.html#a944e7ae7b0664bcd501cfd6f17cbcce0">PBKDF2_SALT_BYTE_SIZE</a>, MCRYPT_DEV_URANDOM));</div>
<div class="line"><a name="l00028"></a><span class="lineno">   28</span>&#160;        <span class="keywordflow">return</span> <a class="code" href="password_8php.html#a288b3a49ca71e24e0f8c7fbf851999da">PBKDF2_HASH_ALGORITHM</a> . <span class="stringliteral">&quot;:&quot;</span> . <a class="code" href="password_8php.html#a1c828dd8ae0d5bd2b03f11c4b5eb2532">PBKDF2_ITERATIONS</a> . <span class="stringliteral">&quot;:&quot;</span> .  $salt . <span class="stringliteral">&quot;:&quot;</span> . </div>
<div class="line"><a name="l00029"></a><span class="lineno">   29</span>&#160;                base64_encode(<a class="code" href="password_8php.html#a92d86c913c13d2e2fda8418c7389c16a">pbkdf2</a>(</div>
<div class="line"><a name="l00030"></a><span class="lineno">   30</span>&#160;                        <a class="code" href="password_8php.html#a288b3a49ca71e24e0f8c7fbf851999da">PBKDF2_HASH_ALGORITHM</a>,</div>
<div class="line"><a name="l00031"></a><span class="lineno">   31</span>&#160;                        <a class="code" href="config_8php_8template.html#ac555f45675f5c7f30bdd1c54e441e3f2">PASSWORD_SALT</a> . $password,</div>
<div class="line"><a name="l00032"></a><span class="lineno">   32</span>&#160;                        $salt,</div>
<div class="line"><a name="l00033"></a><span class="lineno">   33</span>&#160;                        <a class="code" href="password_8php.html#a1c828dd8ae0d5bd2b03f11c4b5eb2532">PBKDF2_ITERATIONS</a>,</div>
<div class="line"><a name="l00034"></a><span class="lineno">   34</span>&#160;                        <a class="code" href="password_8php.html#adc661170f688302b0d0d4da74055a19e">PBKDF2_HASH_BYTE_SIZE</a>,</div>
<div class="line"><a name="l00035"></a><span class="lineno">   35</span>&#160;                        <span class="keyword">true</span></div>
<div class="line"><a name="l00036"></a><span class="lineno">   36</span>&#160;                ));</div>
<div class="line"><a name="l00037"></a><span class="lineno">   37</span>&#160;}</div>
<div class="line"><a name="l00038"></a><span class="lineno">   38</span>&#160;</div>
<div class="line"><a name="l00039"></a><span class="lineno"><a class="code" href="password_8php.html#a704bd23035a2de307a0e3d9d8f43c992">   39</a></span>&#160;<span class="keyword">function</span> <a class="code" href="password_8php.html#a704bd23035a2de307a0e3d9d8f43c992">validatePassword</a>($password, $correct_hash)</div>
<div class="line"><a name="l00040"></a><span class="lineno">   40</span>&#160;{</div>
<div class="line"><a name="l00041"></a><span class="lineno">   41</span>&#160;        <span class="comment">// DEPRECATED: The root password is hashed this way so it can be set in config.php,</span></div>
<div class="line"><a name="l00042"></a><span class="lineno">   42</span>&#160;        <span class="comment">// installation scripts only have to write &#39;rootpassword&#39; instead of a sha1().</span></div>
<div class="line"><a name="l00043"></a><span class="lineno">   43</span>&#160;        <span class="comment">//if ($correct_hash === &#39;rootpassword&#39;)</span></div>
<div class="line"><a name="l00044"></a><span class="lineno">   44</span>&#160;        <span class="comment">//      return slow_equals(ROOT_PASSWORD, $password);</span></div>
<div class="line"><a name="l00045"></a><span class="lineno">   45</span>&#160;        </div>
<div class="line"><a name="l00046"></a><span class="lineno">   46</span>&#160;        $params = explode(<span class="stringliteral">&quot;:&quot;</span>, $correct_hash);</div>
<div class="line"><a name="l00047"></a><span class="lineno">   47</span>&#160;        <span class="keywordflow">if</span> (count($params) &lt; <a class="code" href="password_8php.html#a788fe3ca854015dcdd07b9f192a4a3bf">HASH_SECTIONS</a>)</div>
<div class="line"><a name="l00048"></a><span class="lineno">   48</span>&#160;                <span class="keywordflow">return</span> <span class="keyword">false</span>; </div>
<div class="line"><a name="l00049"></a><span class="lineno">   49</span>&#160;</div>
<div class="line"><a name="l00050"></a><span class="lineno">   50</span>&#160;        <span class="comment">// DEPRECATED: Accept old passwords</span></div>
<div class="line"><a name="l00051"></a><span class="lineno">   51</span>&#160;        <span class="keywordflow">if</span> ($params[<a class="code" href="password_8php.html#a136504e82564d4e4c730a0136eedaf2a">HASH_ALGORITHM_INDEX</a>] === <span class="stringliteral">&#39;old&#39;</span>)</div>
<div class="line"><a name="l00052"></a><span class="lineno">   52</span>&#160;                <span class="keywordflow">return</span> <a class="code" href="password_8php.html#af68819f8ca673471e7dc3c0af669284a">slow_equals</a>($params[<a class="code" href="password_8php.html#a5cf33fff05e1dd64472645f3ff29e6ff">HASH_PBKDF2_INDEX</a>], sha1(OLD_PASSWORD_SALT . $password));</div>
<div class="line"><a name="l00053"></a><span class="lineno">   53</span>&#160;</div>
<div class="line"><a name="l00054"></a><span class="lineno">   54</span>&#160;        $pbkdf2 = base64_decode($params[HASH_PBKDF2_INDEX]);</div>
<div class="line"><a name="l00055"></a><span class="lineno">   55</span>&#160;        <span class="keywordflow">return</span> <a class="code" href="password_8php.html#af68819f8ca673471e7dc3c0af669284a">slow_equals</a>(</div>
<div class="line"><a name="l00056"></a><span class="lineno">   56</span>&#160;                $pbkdf2,</div>
<div class="line"><a name="l00057"></a><span class="lineno">   57</span>&#160;                <a class="code" href="password_8php.html#a92d86c913c13d2e2fda8418c7389c16a">pbkdf2</a>(</div>
<div class="line"><a name="l00058"></a><span class="lineno">   58</span>&#160;                        $params[<a class="code" href="password_8php.html#a136504e82564d4e4c730a0136eedaf2a">HASH_ALGORITHM_INDEX</a>],</div>
<div class="line"><a name="l00059"></a><span class="lineno">   59</span>&#160;                        <a class="code" href="config_8php_8template.html#ac555f45675f5c7f30bdd1c54e441e3f2">PASSWORD_SALT</a> . $password,</div>
<div class="line"><a name="l00060"></a><span class="lineno">   60</span>&#160;                        $params[<a class="code" href="password_8php.html#a3a70c05a23d1156d5e1798114ba4f068">HASH_SALT_INDEX</a>],</div>
<div class="line"><a name="l00061"></a><span class="lineno">   61</span>&#160;                        (<span class="keywordtype">int</span>)$params[<a class="code" href="password_8php.html#aa35c2b34bef45502f6b9de73dcdde662">HASH_ITERATION_INDEX</a>],</div>
<div class="line"><a name="l00062"></a><span class="lineno">   62</span>&#160;                        strlen($pbkdf2),</div>
<div class="line"><a name="l00063"></a><span class="lineno">   63</span>&#160;                        <span class="keyword">true</span></div>
<div class="line"><a name="l00064"></a><span class="lineno">   64</span>&#160;                )</div>
<div class="line"><a name="l00065"></a><span class="lineno">   65</span>&#160;        );</div>
<div class="line"><a name="l00066"></a><span class="lineno">   66</span>&#160;}</div>
<div class="line"><a name="l00067"></a><span class="lineno">   67</span>&#160;</div>
<div class="line"><a name="l00068"></a><span class="lineno"><a class="code" href="password_8php.html#a08675900fee9288af241a35114c99296">   68</a></span>&#160;<span class="keyword">function</span> <a class="code" href="password_8php.html#a08675900fee9288af241a35114c99296">generateRandomPassword</a>($length)</div>
<div class="line"><a name="l00069"></a><span class="lineno">   69</span>&#160;{</div>
<div class="line"><a name="l00070"></a><span class="lineno">   70</span>&#160;        $random = mcrypt_create_iv(<a class="code" href="password_8php.html#a944e7ae7b0664bcd501cfd6f17cbcce0">PBKDF2_SALT_BYTE_SIZE</a>, MCRYPT_DEV_URANDOM);</div>
<div class="line"><a name="l00071"></a><span class="lineno">   71</span>&#160;        <span class="keywordflow">return</span> substr(sha1(base64_encode($random)), 0, $length);</div>
<div class="line"><a name="l00072"></a><span class="lineno">   72</span>&#160;}</div>
<div class="line"><a name="l00073"></a><span class="lineno">   73</span>&#160;</div>
<div class="line"><a name="l00074"></a><span class="lineno"><a class="code" href="password_8php.html#a6e23a46aba7ce503d2a7dde9f6fb8f19">   74</a></span>&#160;<span class="keyword">function</span> <a class="code" href="password_8php.html#a6e23a46aba7ce503d2a7dde9f6fb8f19">passwordNeedsRehash</a>($hash)</div>
<div class="line"><a name="l00075"></a><span class="lineno">   75</span>&#160;{</div>
<div class="line"><a name="l00076"></a><span class="lineno">   76</span>&#160;        $params = explode(<span class="stringliteral">&quot;:&quot;</span>, $hash);</div>
<div class="line"><a name="l00077"></a><span class="lineno">   77</span>&#160;        <span class="keywordflow">if</span> (count($params) &lt; <a class="code" href="password_8php.html#a788fe3ca854015dcdd07b9f192a4a3bf">HASH_SECTIONS</a>)</div>
<div class="line"><a name="l00078"></a><span class="lineno">   78</span>&#160;                <span class="keywordflow">return</span> <span class="keyword">true</span>; </div>
<div class="line"><a name="l00079"></a><span class="lineno">   79</span>&#160;        <span class="keywordflow">if</span> ($params[<a class="code" href="password_8php.html#a136504e82564d4e4c730a0136eedaf2a">HASH_ALGORITHM_INDEX</a>] === <span class="stringliteral">&#39;old&#39;</span>)</div>
<div class="line"><a name="l00080"></a><span class="lineno">   80</span>&#160;                <span class="keywordflow">return</span> <span class="keyword">true</span>; </div>
<div class="line"><a name="l00081"></a><span class="lineno">   81</span>&#160;        <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
<div class="line"><a name="l00082"></a><span class="lineno">   82</span>&#160;}</div>
<div class="line"><a name="l00083"></a><span class="lineno">   83</span>&#160;</div>
<div class="line"><a name="l00084"></a><span class="lineno">   84</span>&#160;<span class="comment">// Compares two strings $a and $b in length-constant time.</span></div>
<div class="line"><a name="l00085"></a><span class="lineno"><a class="code" href="password_8php.html#af68819f8ca673471e7dc3c0af669284a">   85</a></span>&#160;<span class="keyword">function</span> <a class="code" href="password_8php.html#af68819f8ca673471e7dc3c0af669284a">slow_equals</a>($a, $b)</div>
<div class="line"><a name="l00086"></a><span class="lineno">   86</span>&#160;{</div>
<div class="line"><a name="l00087"></a><span class="lineno">   87</span>&#160;        $diff = strlen($a) ^ strlen($b);</div>
<div class="line"><a name="l00088"></a><span class="lineno">   88</span>&#160;        <span class="keywordflow">for</span>($i = 0; $i &lt; strlen($a) &amp;&amp; $i &lt; strlen($b); $i++)</div>
<div class="line"><a name="l00089"></a><span class="lineno">   89</span>&#160;        {</div>
<div class="line"><a name="l00090"></a><span class="lineno">   90</span>&#160;                $diff |= ord($a[$i]) ^ ord($b[$i]);</div>
<div class="line"><a name="l00091"></a><span class="lineno">   91</span>&#160;        }</div>
<div class="line"><a name="l00092"></a><span class="lineno">   92</span>&#160;        <span class="keywordflow">return</span> $diff === 0; </div>
<div class="line"><a name="l00093"></a><span class="lineno">   93</span>&#160;}</div>
<div class="line"><a name="l00094"></a><span class="lineno">   94</span>&#160;</div>
<div class="line"><a name="l00095"></a><span class="lineno">   95</span>&#160;<span class="comment">/*</span></div>
<div class="line"><a name="l00096"></a><span class="lineno">   96</span>&#160;<span class="comment"> * PBKDF2 key derivation function as defined by RSA&#39;s PKCS #5: https://www.ietf.org/rfc/rfc2898.txt</span></div>
<div class="line"><a name="l00097"></a><span class="lineno">   97</span>&#160;<span class="comment"> * $algorithm - The hash algorithm to use. Recommended: SHA256</span></div>
<div class="line"><a name="l00098"></a><span class="lineno">   98</span>&#160;<span class="comment"> * $password - The password.</span></div>
<div class="line"><a name="l00099"></a><span class="lineno">   99</span>&#160;<span class="comment"> * $salt - A salt that is unique to the password.</span></div>
<div class="line"><a name="l00100"></a><span class="lineno">  100</span>&#160;<span class="comment"> * $count - Iteration count. Higher is better, but slower. Recommended: At least 1000.</span></div>
<div class="line"><a name="l00101"></a><span class="lineno">  101</span>&#160;<span class="comment"> * $key_length - The length of the derived key in bytes.</span></div>
<div class="line"><a name="l00102"></a><span class="lineno">  102</span>&#160;<span class="comment"> * $raw_output - If true, the key is returned in raw binary format. Hex encoded otherwise.</span></div>
<div class="line"><a name="l00103"></a><span class="lineno">  103</span>&#160;<span class="comment"> * Returns: A $key_length-byte key derived from the password and salt.</span></div>
<div class="line"><a name="l00104"></a><span class="lineno">  104</span>&#160;<span class="comment"> *</span></div>
<div class="line"><a name="l00105"></a><span class="lineno">  105</span>&#160;<span class="comment"> * Test vectors can be found here: https://www.ietf.org/rfc/rfc6070.txt</span></div>
<div class="line"><a name="l00106"></a><span class="lineno">  106</span>&#160;<span class="comment"> *</span></div>
<div class="line"><a name="l00107"></a><span class="lineno">  107</span>&#160;<span class="comment"> * This implementation of PBKDF2 was originally created by https://defuse.ca</span></div>
<div class="line"><a name="l00108"></a><span class="lineno">  108</span>&#160;<span class="comment"> * With improvements by http://www.variations-of-shadow.com</span></div>
<div class="line"><a name="l00109"></a><span class="lineno">  109</span>&#160;<span class="comment"> */</span></div>
<div class="line"><a name="l00110"></a><span class="lineno"><a class="code" href="password_8php.html#a92d86c913c13d2e2fda8418c7389c16a">  110</a></span>&#160;<span class="keyword">function</span> <a class="code" href="password_8php.html#a92d86c913c13d2e2fda8418c7389c16a">pbkdf2</a>($algorithm, $password, $salt, $count, $key_length, $raw_output = <span class="keyword">false</span>)</div>
<div class="line"><a name="l00111"></a><span class="lineno">  111</span>&#160;{</div>
<div class="line"><a name="l00112"></a><span class="lineno">  112</span>&#160;        $algorithm = strtolower($algorithm);</div>
<div class="line"><a name="l00113"></a><span class="lineno">  113</span>&#160;        <span class="keywordflow">if</span>(!in_array($algorithm, hash_algos(), <span class="keyword">true</span>))</div>
<div class="line"><a name="l00114"></a><span class="lineno">  114</span>&#160;                die(<span class="stringliteral">&#39;PBKDF2 ERROR: Invalid hash algorithm.&#39;</span>);</div>
<div class="line"><a name="l00115"></a><span class="lineno">  115</span>&#160;        <span class="keywordflow">if</span>($count &lt;= 0 || $key_length &lt;= 0)</div>
<div class="line"><a name="l00116"></a><span class="lineno">  116</span>&#160;                die(<span class="stringliteral">&#39;PBKDF2 ERROR: Invalid parameters.&#39;</span>);</div>
<div class="line"><a name="l00117"></a><span class="lineno">  117</span>&#160;</div>
<div class="line"><a name="l00118"></a><span class="lineno">  118</span>&#160;        $hash_length = strlen(hash($algorithm, <span class="stringliteral">&quot;&quot;</span>, <span class="keyword">true</span>));</div>
<div class="line"><a name="l00119"></a><span class="lineno">  119</span>&#160;        $block_count = ceil($key_length / $hash_length);</div>
<div class="line"><a name="l00120"></a><span class="lineno">  120</span>&#160;</div>
<div class="line"><a name="l00121"></a><span class="lineno">  121</span>&#160;        $output = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a name="l00122"></a><span class="lineno">  122</span>&#160;        <span class="keywordflow">for</span>($i = 1; $i &lt;= $block_count; $i++) {</div>
<div class="line"><a name="l00123"></a><span class="lineno">  123</span>&#160;                <span class="comment">// $i encoded as 4 bytes, big endian.</span></div>
<div class="line"><a name="l00124"></a><span class="lineno">  124</span>&#160;                $last = $salt . pack(<span class="stringliteral">&quot;N&quot;</span>, $i);</div>
<div class="line"><a name="l00125"></a><span class="lineno">  125</span>&#160;                <span class="comment">// first iteration</span></div>
<div class="line"><a name="l00126"></a><span class="lineno">  126</span>&#160;                $last = $xorsum = hash_hmac($algorithm, $last, $password, <span class="keyword">true</span>);</div>
<div class="line"><a name="l00127"></a><span class="lineno">  127</span>&#160;                <span class="comment">// perform the other $count - 1 iterations</span></div>
<div class="line"><a name="l00128"></a><span class="lineno">  128</span>&#160;                <span class="keywordflow">for</span> ($j = 1; $j &lt; $count; $j++) {</div>
<div class="line"><a name="l00129"></a><span class="lineno">  129</span>&#160;                        $xorsum ^= ($last = hash_hmac($algorithm, $last, $password, <span class="keyword">true</span>));</div>
<div class="line"><a name="l00130"></a><span class="lineno">  130</span>&#160;                }</div>
<div class="line"><a name="l00131"></a><span class="lineno">  131</span>&#160;                $output .= $xorsum;</div>
<div class="line"><a name="l00132"></a><span class="lineno">  132</span>&#160;        }</div>
<div class="line"><a name="l00133"></a><span class="lineno">  133</span>&#160;</div>
<div class="line"><a name="l00134"></a><span class="lineno">  134</span>&#160;        <span class="keywordflow">if</span>($raw_output)</div>
<div class="line"><a name="l00135"></a><span class="lineno">  135</span>&#160;                <span class="keywordflow">return</span> substr($output, 0, $key_length);</div>
<div class="line"><a name="l00136"></a><span class="lineno">  136</span>&#160;        <span class="keywordflow">else</span></div>
<div class="line"><a name="l00137"></a><span class="lineno">  137</span>&#160;                <span class="keywordflow">return</span> bin2hex(substr($output, 0, $key_length));</div>
<div class="line"><a name="l00138"></a><span class="lineno">  138</span>&#160;}</div>
<div class="line"><a name="l00139"></a><span class="lineno">  139</span>&#160;</div>
</div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated on Sun Sep 8 2013 17:44:57 for wwwApp by &#160;<a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/>
</a> 1.8.1.1
</small></address>
</body>
</html>
